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The invention provides for resource allo- 
cation logic for a computer system including a 
plurality of processors (17 ? 21) which share 
access to, and control of, a plurality of resour- 
ces, such as disk drive units (31-35, 41-45) or 
busses (51-55). Resource allocation logic (300) 
coordinates the execution of requests received 
from the processors to avoid resource sharing 
inefficiencies and deadlock situations. The alto- 
cation logic (300) maintains a "request" queue 
for each processor (17, 21), seeking to satisfy all 
requests quickly and fairly. The queues contain 
an entry corresponding to each request re- 
ceived from its corresponding processor and an 
identification of resources that are required by 
the entry's corresponding request The allo- 
cation logic (300) also maintains a "resources 
available" status array of resources which are 
not currently in use by any processors, or are 
not reserved for future use by any processors. 
The logic repeatedly compares each entry in the 
request queues with the entries in the resources 
available status array to detect an entry in the 
request queue identifying resources all of which 
are contained in the resources available status 
array. Once the allocation logic (300) can satisfy 
a particular request, it signals a grant to the 
requesting processor for the resources reques- 
ted and the requested resources are removed 
from she resources available status array. Upon 
conclusion of execution of the granted request, 
the resources are again r leased to the resour- 
ce allocation logic (300) for utilization by other 
resource requests. 
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The present invention relates to a method of managing resources shared by multiple processing units. 

In particular, the present invention can provide for a method of managing the operations of multiple disk 
array controllers which share access to the disk drive units within the array. 

Disk array storage devices comprising a multiplicity of small inexpensiv disk drives, such as the 5 V* or 
3 V2 inch disk drives currently used in personal computers and workstations, connected in parallel are finding 
increased usage for non-volatile storage of information within computer systems. The disk array appears as 
a single large fast disk to the host system but offers improvements in performance, reliability, power consump- 
tion and scalability over a single large magnetic disk. 

Most popular RAID (Redundant Array of Inexpensive Disks) disk array storage systems include several 
drives for the storage of data and an additional disk drive for the storage of parity information. Thus, should 
one of the data or parity drives fail, the lost data or parity can be reconstructed. In order to coordinate the op- 
eration of the multitude of drives to perform read and write functions, parity generation and checking, and data 
restoration and reconstruction, many RAID disk array storage systems include a dedicated hardware controller, 
thereby relieving the host system from the burdens of managing array operations. An additional or redundant 
disk array controller (RDAC) can be provided to reduce the possibility of loss of access to data due to a con- 
troller failure. 

The present invention seeks to provide for advantages having regard to the management of shared re- 
sources such as disk arrays. 

In accordance with one aspect of the present invention, there is provided a method of coordinating the 
execution of I/O requests received from requesting agents in a computer system in which said requesting 
agents share access to and control over a plurality of resources, characterized by the steps of: 

(A) establishing a request queue which includes an entry corresponding to each I/O request received from 
said requesting agents, each entry including an identification of resources that are required by said entry's 
corresponding I/O request; 

(B) maintaining a resources available status array which includes an entry for each resource which is not 
currently in use by any requesting agent and is not currently reserved for future use by any requesting 
agent; 

(C) systematically comparing each entry in said request queue with the entries in said resources available 
status array to detect an entry in said request queue identifying resources all of which are contained in 
said resources available status array; 

(D) granting control of the resources associated with said entry detected in step C to the requesting agent 
providing the I/O request corresponding to the entry detected in step C; and 

(E) executing the I/O request corresponding to the entry identified in step C. 

In accordance with another aspect of the present invention there is provided a method of coordinating the 
operation of processors, in a disk array system including first and second disk array controllers and a plurality 
of disk drives and busses under the control of each of said processors, characterized by the steps of: 

(A) establishing a request queue for each disk array controller which includes an entry corresponding to 
an I/O request received by said disk array system, each entry including an identification of disk drives and 
busses that are required by said entry's corresponding I/O request; 

(B) maintaining a resources available status array which includes an entry for each disk drive and bus 
which is not currently in use by any disk array controller and is not currently reserved for future use by 
any disk array controller; 

(C) systematically comparing each entry in said request queues with the entries in said resources available 
status array to detect an entry in said request queues identifying resources all of which are contained in 
said resources available status array; 

(D) granting control of the disk drives and busses associated with said entry detected in step C to the disk 
array controller associated with the request queue corresponding to the entry detected in step C; and 

(E) executing the I/O request corresponding to the entry identified in step C. 

The present invention, is particularly advantageous in providing a new and useful method and structure 
for coordinating the operation of multiple controllers which share access to and control over common resourc- 
es. 

In particular the present invention advantageously can provide such a method and structure which reduces 
or eliminates resource sharing inefficiencies and deadlock situations which arise in systems which include 
shared resources. 

Preferably, the present invention can also provide a new and useful disk array storag system including 
multiple active array controllers. 

Further, the present invention can provide a method for coordinating the operation of multiple active con- 
trollers within a disk array which share access to and control over common resources. 
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According to one particular feature, the present invention provides a new and useful method for avoiding 
contention between controllers in a disk array system including multiple active controllers. 

In particular from the above, it will be appreciated that the present invention can comprise a method for 
coordinating the execution of requests received from multiple requesting agents which share access to and 

5 control over common resources within a computer system in order to avoid resource sharing inefficiencies and 
deadlock situations. The method includes the steps of: (A) establishing a "request" queue, said request queue 
including an entry corresponding to each request received from the requesting agents, each entry including 
an identification of resources that are required by said entry's corresponding request; (B) maintaining a "re- 
sources available" status array, said resources available status array including an entry for each resource 

10 which is not currently in use by any requesting agent and is not currently reserved for future use by any re- 
questing agent; (C) systematically comparing each entry in said request queue with the entries in said resourc- 
es available status array to detect an entry in said request queue identifying resources ail of which are con- 
tained in said resources available status array; (D) granting control of the resources associated with said entry 
detected in step C to the requesting agent providing the request corresponding to the entry detected in step 

t5 C; and (E) executing the request corresponding to the entry identified in step C. The resources associated 
with the granted request are removed from the resources available status array during the execution of step 
(E). Upon conclusion of execution of the granted request, the resources are again placed in the resources avail- 
able status array for utilization by other resource requests. 

A particular embodiment may be incorporate^ into a disk array subsystem including multiple array coii- 

20 trailers which share access to, and control over, multiple disk drives and control, address and data busses with- 
in the disk array. A request queue containing entries for I/O requests received from the host computer system 
is maintained for each array controller, the method of the present invention alternately examining entries in 
each request queue to detect an entry in either request queue identifying resources all of which are contained 
in the resources available status array. Additionally, each request queue contains a list age indicating the rel- 

25 ative age of each request queue with respect to the other request queues, and each entry in the request queues 
includes a request age indicating the relative age of each entry in a request queue with respect to other entries 
in the request queue. In examining the request queues to identify I/O requests for execution, priority is awarded 
to entries based on the relative ages of the request queues and request queue entries. 

The invention is described further hereinafter, by way of example only, with reference to the accompanying 

30 drawings in which : 

Fig. 1 is a block diagram representation of a disk array system including two SCSI host busses, dual disk 
array controllers; and ten disk drives accessed through five SCSI busses shared by the dual controllers; 
Fig. 2 is a block diagram representation of a disk array system including dual disk anray controllers con- 
nected to a common SCSI host bus, and ten disk drives accessed through five SCSI busses shared by 
35 the dual controllers; 

Fig. 3 is a block diagram representation of a disk array system including dual active controllers and a com- 
munication link between the controllers for providing communications and coordinating resource arbitra- 
tion and allocation between the dual active disk array controllers; and 

Fig. 4 is a block diagram, comprising Figs. 4A, 4B and 4C, of the ICON (Inter-Controller Communication 
40 Chip) ASIC (Application Specific Integrated Circuit) incorporated into each disk array controller of Figure 

3 for providing communications and coordinating resource arbitration and allocation between the dual ac- 
tive disk array controllers. 

Figure 1 is a block diagram representation of a disk array storage system including dual disk array con- 
trollers 11 and 1 3. Array controller 1 1 is connected through a SCSI host bus 1 5 to host system 1 7. Array con- 
45 trailer 13 is likewise connected through a SCSI host bus 19 to a host system 21. Host systems 17 and 21 may 
be different processors in a multiple processor computer system. Each array controller has access to ten disk 
drives, identified by reference numerals 31 through 35 and 41 through 45, via five SCSI busses 51 through 
55. Two disk drives reside on each one of busses 51 through 55. Disk array controllers 11 and 13 may operate 
in one of the following arrangements: 
so (1 ) Active/Passive RDAC. 

All array operations are controlled by one array controller, designated the active controller. The second, 
or passive, controller is provided as a hot spare, assuming array operations upon a failure of the first con- 
troller. 

(2) Active/Active RDAC - Non Concurrent Access of Array Drives. On controller has primary responsi- 
55 bility for a first group of shared resources (disk drives, shared busses), and stand-by responsibility for a 

second group of resources. The second controller has primary responsibility for the second group of re- 
sources and stand-by responsibility for the first group of resources. For xample, disk array controller 11 
may have primary responsibility for disk drives 31 through 35, while disk array controller has primary re- 
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sponsibility for disk drives 41 through 45. 

(3) Active/Active RDAC - Concurr nt Access of Array Drives. Each array controller has equal access to 
and control over all resources within the array. 

Providing each array controller with equal access to, and control over, shared resources may lead to re- 
source sharing inefficiencies or deadlock scenarios. For example, certain modes of operation require that sub- 
groups of the channel resources be owned by one of the array controllers. Failure to possess all required re- 
sources concurrently leads to blockage of the controller until all resources have been acquired. In a multiple 
controller environment obtaining some but not all the required resources for a given transaction may lead to 
resource inefficiencies or deadlock in shared resource acquisition. 

Likewise, an array controller that provides hardware assistance in generating data redundancy requires 
simultaneous data transfer from more than one drive at a time. As data is received from the drives or the host, 
it is passed through a RAID-striping ASIC to generate data redundancy information that is either stored in con- 
troller buffers or passed immediately to a drive for storage. Each controller must have access to multiple se- 
lected dnve channels concurrently so that the data may be passed through the RAID striping ASIC from the 
multiple data sources concurrently. Deadlock can occur if no means to coordinate access to the drive channels 
exists. 

Two examples are given below to illustrate the deadlock situation in a two disk array controller environ- 
ment 

20 Deadlock Condition 1: 

Referring to Figure 1, disk array controllers 11 and 13 are seen to share five SCSI buses 51 through 55 
and the ten drives that are connected to the SCSI buses. Disk array controller 11 is requested to perform an 
I/O operation to transfer data from drives disk drive 31 and 33. Simultaneously, disk array controller 13 is re- 
quested to perform an I/O operation to transfer data from disk drives 41 and 43. Both disk controllers attempt 
to access the drives they need concurrently as follows; 

Array controller 11 acquires bus 51 and disk drive 31, and is blocked from acquiring bus 53 and disk 
drive 33. 

Array controller 1 3 acquires bus 53 and disk drive 43, and continues arbitrating for bus 51 and disk drive 

41. 

Controller 1 1 now has SCSI bus 51 in use, and is waiting for disk drive 33 on SCSI bus 53 (owned by Con- 
troller 13). Controller 13 now has SCSI bus 53 in use, and is waiting for disk drive 41 on SCSI bus 51 (owned 
by Controller 1). 

35 Deadlock Condition 2: 

Deadlock can occur when multiple controllers are attached to the same host bus. This may occur when 
host SCSI bus 15 and host SCSI bus 19 are the same physical SCSI bus, identified as bus 27 in Figure 2. 
Controller 11 is requested to perform an I/O operation requiring a transfer of data from disk drive 31 on SCSI 
bus 51 to host 17. Simultaneously, controller 13 is requested to perform an I/O operation requiring a transfer 
of data from disk drive 41 on SCSI bus 51 to host 21. Both controllers attempt access of the resources they 
need concurrently as follows: 

Array controller 1 1 acquires the single Host SCSI bus, identified by reference numeral 27 and is blocked 
from acquiring SCSI bus 51 and disk drive 31. 

Array controller 1 3 acquires SCSI bus 51 and disk drive 41 , and is blocked from acquiring the host SCSI 
bus 15. 

Controller 11 now has the host SCSI bus 27 in use, and is waiting for access to SCSI bus 51 (owned by 
Controller 1 3.) so that it can connect to disk drive 31 . Controller 1 3 now has SCSI bus 51 in use, and is waiting 
for access to the host SCSI bus 27 (owned by Controller 1.). 

A method and structure for coordinating the operation of multiple controllers which share access to and 
control over common resources is required to eliminate resource sharing inefficiencies and deadlock situa- 
tions. 

A disk array system including dual active controllers constructed in accordance with a preferred embodi- 
ment f the pr sent invention is shown in block diagram form in Figure 3. In addition to the structure shown 
in the disk array system of Figure 1, the system of Figure 3 includes a dedicated communication link 57 con- 
nected between the array controllers 11 and 13, and an ICON-ASIC incorporated into each of the contrail rs 
identified by reference numerals 61 and 63, respectively. 

The communication link 57 and ICON chip provide communication between, and resource arbitration and 
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allocation for the dual disk array controllers. 

Figure 4 is a block diagram of the ICON chip incorporated into each of the dual active array controllers 11 
and 13 included within the disk array system shown in Figure 3. The ICON chip contains all functions necessary 
to provide high speed serial communication and resource arbitration/allocation betw en two Disk Array con- 
trollers The primary application for the ICON chip is in Disk Array systems utilizing redundant disk array con- 
trollers Because the redundant controller configuration shares resources (disk drives and SCSI buses) be- 
tween two controllers, a method of arbitrating for these common resources must be utilized in order to prevent 
deadlocks and to maximize system performance. The ICON chip contains a hardware implementation of a re- 
source allocation algorithm which will prevent deadlocks and which strives to maximize system performance. 
In addition to performing resource arbitration/allocation, the ICON chip also provides a means of sending/re- 
ceiving generic multiple byte messages between Disk Array controllers. The ICON chip includes the following 
logic modules: 

Microprocessor Interface Control Logic 100. 

The microprocessor interface block 100 allows an external microprocessor to configure and monitor the 
state of the ICON chip. Configuration and status information are maintained in registers within the ICON chip. 
The configuration, control, and status registers are designed to provide operating software with a wide range 
of functionality and diagnostic operations. Interrupt masking and control are also included in mis Functional 
block. 
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Inter-controller Communication Logic 200. 

The Inter-controller Communication block 200 contains all structures and logic required to implement the 
inter-controller communication interface. This block includes the following structures/logic: Send State Se- 
quencer 201. Receive State Sequencer 203, Message SendBuffer 205, Message Receive Buffer 207. Status 
Send Registe7209; and Status Receive Buffer 211. These modules work together to form two independent 
unidirectional communication channels. Serialization and Deserialization of data packets occurs in Send State 
Sequencer 201 and Receive State Sequencer 203 modules. Serial data output from the Send State Sequencer 
may be fed into the Receiver State Sequencer module for a full diagnostic data turnaround. 

The Inter-controller Communication Block is used to send generic messages and status or to send specific 
request/grant/release resource messages between two Disk Array controllers. 

Communication between pairs of ICON chips is provided by six signals. These signals are defined as follows: 



Table 1 



JO 


Communication Signal Descriptions 




Name 


Type 


Description 


40 


ARDY/ 


OUT 


f A* Port ready. This output is controlled by the ICON Ready bit in the Control 
Register and is monitored by the alternate controller. 




BRDY/ 


IN 


'B' Port ready. This input is used to monitor the Ready/Not Ready status of the 
alternate controller. 


45 


AREQ.DAT/ 


OUT 


•A Port Requuest/Serial Data. This output signal is used to request data trans- 
fer and then send serial data to the alternate controller in response to 
the *A* Port Acknowledge signal. 


50 


BREQ.DAT/ 


IN 


•B f Port Request/Serial Data. This input is used to receive serial data from the 
alternate controller. 




AACK/ 


IN 


'A Port Acknowledge. This signal is received from the alternate controller as 
the handshake for a single data bit transfer. 


55 


BACK/ 


OUT 


•B' Port Acknowledge. This output signal is sent to the alternat controller to 
control a serial receiv data transfer operation. 
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Resource Allocation Logic 300. 

The Resource AJIocation block 300 contains all structures and logic required to manage up to ight shared 
resources between two Disk Array controllers, referred to as the master and slave disk array controllers These 
»„h ?n?f °°* f^i 6 ! he ReS ° UrCe A "° Cat0r 301 1 tW0 Sels of Resource Ret > uest Li sts (Master/Slave) 303 
RFo! T eaS !^ S ° UrCe F,F ° S < Master/sl ^) 307 and 309, two sets of Resources Granted 
FIFOs ( Mas ter/Slave^311 and 313. and the Resource Scoreboard comprising resources allocated and resourc- 
es available blocks 315 and 317, respectively. i«K>uurc- 

nf .„ 7 r„tlr y e 'f ment in thi ?. b ' OCk '" S Resource Mocat0T 301 • ™s block consists ofahardware implementation 

l„iw2 r2 ' T UTCB a "*,f t ' 0n al9 ° rithm - M 0ther data struc,ures in 0113 block are «™«*y controlled and 
mor, tared by the Resource Allocator. TheResource Allocator presentin the ICONchip for the master controller 

s£Z ^TZT T 16 ° f the ReS ° UrCe ReqU6St LiStS - the Release Resou «* FIFOs, and £S» 
ent >n the ICON chip for the slave controller is not active except during diagnostic testing. 
Controller Functions 400. 

The Controller Functions logic 400 provides several board-level logic functions in order to increase the 
level of integration present on the disk array controller design. 

The invention advantageously encompasses the establishes?* -f - simte oo-^-i-'satkn "nk and Dro- 
oTi^ e nar^ n r , e!o U ^es harin9 reSOUTCeS • a " d 3 U " ique arbitration al 9°r«thm which is used for the management 

The communication link and protocol are used to request, grant, and release resources to or from the re- 
source arbiter. The protocol requires the establishment among the devices sharing resources of a single master 
device and one or more slave devices. The master/slave distinction is used only for the purposes of locating 
the active resource allocation logic 300. Although each controller includes resource allocation logic, this logic 

I™ f maStef contro,,er - ,n the discussion which follows, references to the resource allocatton 
logic 300 and rts components will refer to the active resource allocation logicand its components. Both master 
and slave devices retain their peer to peer relationship for system operations 

The active resource allocator 301 is implemented in the master device. A device formulates a resource 
request by compiling a list of resources that are required for a given operation. The resource request is then 
passed to the resource allocation logic 300. The resource allocation logic 300 maintains a list of requests for 
each dev.ce in the system, seeking to satisfy all requests quickly and fairly. Once the allocation logic can satisfy 
a particular request, it signals a grant to the requesting device for the resources requested. The device with 
the granted resource requests has access to the granted resources until it releases them. The release is then 
performed by sending a release message to the resource allocator to free the resources for consumption by 
other resource requests. H * 

All resource requests, request granting, and request freeing involving a slave device is performed by send- 
ing inter-device messages, which include message type and data fields, between the master (where the active 
resource allocation logic is located) and the slave devices using the interface described above All resource 
requests, request grants, and request freeing involving only the master device may be done within the local 
to the master device. 

The resource allocation logic 300 located in the arbitrarily assigned master device includes a resource al- 
locate algonthm and associated data structures for the management of an arbitrary number of shared re- 
sources between an arbitrary number of devices. The data structures and algorithm for sharing resources are 
discussed below. 

Data Structures. 

For each device which requires shared resource management, a request queue, or list of resource re- 
quests, of arbrtrary depth is maintained by the master device (master and slave request lists 303 and 305) 
Associated wrth each of the device request queues are two count values, a list age (which indicates the relative 
age of a device request queue with respect to the other request queues) and a request age (which indicates 
the relative age of the oldest entry in a single device's request queue with respect to other entries in the same 
request queue). In addition to the count values associated with each device request queue, two bool an flags 
are also maintained; a Request Stagnation flag and a List Stagnation flag. Request Stagnation TRUE indicates 
that the relative age of a device's oldest resource request has exceeded a programmable threshold value. List 
Stagnation TRUE indicates that the relative age of a device* request queue with respect to other devices' re- 



6 



* 



EP 0 676 699 A2 

quest queues has xceeded a programmable threshold value. Stagnation (Request or List) is mutually exclu- 
sive between all devices, only one device can be in the Stagnant state at any given time. 

The master device also maintains th current state of resource allocation and reservation by tracking "Re- 
sources Available" and "Resources Reserved". "Resources Available" indicates to the r source allocation ai- 
5 gorithm which resources are not currently in use by any device and are not currently reserved for future allo- 
cation. Any resources contained within the "Resources Available" structure (Resources Available block 317) 
are therefore available for allocation. "Resources Reserved" indicates to the resource allocation algorithm 
which resources have been reserved for future allocation due to one of the devices having entered the Stagnant 
state (Request Stagnation or List Stagnation TRUE). Once a device enters the Stagnant state, resources in- 
fo eluded in the stagnant request are placed into the "Reserved Resources" structure (Resource Reserved block 
315) either by immediate removal from the "Resources Available" structure, or for resources currently allocat- 
ed, at the time they are released or returned to the resource poo!) and kept there until all resources included 
in the stagnant request are available for granting. Stagnation (Request or List) is mutually exclusive between 
all devices; only one device can be in the Stagnant state at any given time. The last two data structures used 
15 by the resource allocation algorithm are pointers to the currently selected device (genericafly termed TURN 
and LISTSELECT) which is having it's resource request queue being searched for a match with available re- 
sources. 

Algorithm. 

20 

Resource allocation fairness is provided using the above-defined data structures. The Request Stagnation 
flag as previously described is used to ensure fairness in granting resource requests within a single device. 
For example, assuming random availability of resources, a device which requests most resources in groupings 
of two could starve it's own requests for groupings of five resources from the same resource pool unless a 
25 mechanism for detecting and correcting this situation exists. The request age counts with their associated 
thresholds ensure that resource requests within a single device will not be starved or indefinitely blocked. 

The List Stagnation flag is used to ensure fairness in granting resource requests between devices. For 
example, a device which requests resources in groupings of two could starve another device in the system 
requesting groupings of five resources from the same resource pool. The list age counts with their associated 
30 thresholds ensure that all devices* requests will be serviced more fairly and that a particular device will not 
become starved waiting for resource requests. 

Two modes of operation are defined for the resource allocation algorithm: Normal mode and Stagnant 
mode. Under Normal mode of operation, no devices have entered the Stagnant state and the algorithm uses 
the TURN pointer in a round-robin manner to systematically examine each of the device's request queues seek- 
35 ing to grant any resources which it can (based on resource availability) with priority within a device request 
queue based on the relative ages of the request entries. Upon transition to the Stagnant mode (a device has 
enter the Stagnant state), the TURN pointer is set to the Stagnant device and the resource allocation algorithm 
will favor granting of the request which caused the Stagnant state by reserving the resources included in the 
stagnant request such that no other device may be granted those resources. Although the TURN pointer is 
40 effectively frozen to the Stagnant device, other device request queues and other entries within the Stagnant 
device's request queue will continue to search for resource matches based on what is currently available and 
not reserved using the secondary list pointer (LISTSELECT). 

The actual resource grant operation includes the removal of granted resources from the "Resources Avail- 
able" structure along with the clearing of "Resources Reserved" structure (if the resource grant was for a Stag- 
es nant request). Resource freeing or release operations are accomplished simply by updating the "Resources 
Available" structure. 

A Specific Resource Algorithm implementation. 

so The following is an implementation of the algorithm using the "C" programming language for a sample case 

of a master and a single slave device with the following characteristics: 

• Resource Request Queue depth for both devices = 4 

• Number of Shared R sources b tween the devices = 8 

As stated earlier, the number of devices, number of shared resources, and queue depth are strictly arbi- 
55 trary. The functionality contained and implied by this algorithm is implemented in the device sharing the re- 
sources designated the master. The description describes the service poll used to look for a resource request 
to be granted from any controller. The release operation is simply provided by allocating th resources to be 
released to the channels available variable. 
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Although this xample implementation uses the "C" programming language, the implementation may take 
any form, such as other programming languages, hardware state machine implementations, etc. 

void resource_anocatio n _algorithm(void) /. ^ rcsourcc 

algorithm •/ 

{ 

int servicejoops; 

resource_operation *stagnant_operatioii; 



r while ((q_head_is_not_empty(slav e _list)) && (Oead.is.noLemptyCmaster.list))) 
7 

for (servicejoops = 0; servicejoops < 4; service Joops++) 
{ 



if (servicejoops = 0) 
{ 

if((!master_request_stagnation) && (!masterJist_stagnation) && 
(!slave_request_stagnation) && (Mslavejist.stagnation)) 
{ 

if (last_serviced == MASTER) 
rum = SLAVE; 

else 

turn = MASTER; 

} 

} 
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if (mm = MASTER) 
{ 

if (!(O ead _'s_not_empt){master_list))) 
{ 

master_list_age = 0; 
mm = SLAVE; 
continue; 

> 

if ((!master_list_stagnation) && (!master_request_stagnation)) 
{ 

if (acquire_from_master()) 

j 

if (oldestjmasterjserviced) 
{ 

turn = SIAVE; 
master_request_age = 0; 

else 

{ 



master_request_age++; 

if (master_request_age >= request_threshold) 

{ 

num_master_req_stagnation ++; 
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master_request_stagnation = TRUE; 
} 

else 

{ 

turn = SLAVE; 
} 

} 

/• a request from the master queue was serviced */ 
master_list_age = 0; 
slavc^list_age+}-; 
if ((slave_list_age >= 
list_threshold)&&(!master_request_stagnation)) 

{ 

if (q_head_is_not_empty(slave_list)) 
{ 

num_sIave_list_stagnation++; 

sIave_list_stagnation = TRUE; 
turn = SLAVE; 

} 

} 

} 

else 

{ 

/* no master queue request was serviced */ 
turn = SLAVE; 
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} 

} 

else 

{ 

/* masterJist_stagnation or master_request_stagnation */ 
stagnant_operation = (resource_operation*)master_list->head; 
slave_list_age = 0; 
15 if (acquire_from_master()) 

{ 

if (oldest_master_serviced) 
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turn = SLAVE; 

master_Jist_stagnation = FALSE; 
master_request_stagnation = FALSE; 
slave_list_age++; 

master_request_age = 0; 
master_list_age = 0; 
} 

} 

else 

{ 

if (acquire_froni_slaveO) 
{ 

slave_list_age = 0; 
if (oldest_s!ave_serviced) 
slave_request_age = 0; 
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} 

} 

} 

} 
{ 

/* turn = SLAVE "I 
if (!(Ocad_is_not_empty(slave_list))) 
{ 

slave_list_age = 0; 
turn = MASTER; 
continue; 
} 

if ((lslave_list_stagnation) && (!slave_request_stagnation)) 
{ 

if (acquire_from_slaveO) 
{ 

if (oldest_sIave_serviced) 
{ 

turn = MASTER; 
slave_request_age = 0; 
} 

else 

{ 
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slave_request_age++; 

if (slave_request_age >= requestjhreshold) 
{ 

num_slave_req_stagnation++; 

s!ave_request_stagnation = TRUE; 
} 

else 

{ 

turn = MASTER; 
} 

} 

/* a request from the slave queue was serviced */ 
slave_list_age =0; 
master _list_age++; 

if ((master_list_age >= list ^threshold) && 
(! slave_request_stagnation)) 

{ 

if (q_headJs_not_empty(master_list)) 
{ 

num_master_list_stagnation++; 

master_list_stagnation = TRUE; 

turn = MASTER; 

} 

} 
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} 

else 

{ 

/* no slave queue request was serviced */ 

turn = MASTER; 

} 

} 

else 

{ 

/* slave_list_stagnation or slave_request_stagnation •/ 
stagnant_operatton = (resource_operation *)slave_list-: 
master] ist_age = 0; 

if (acquire_from_slaveO) 
{ 

if (oldest_sIave_serviced) 
{ 

turn = MASTER; 

slave Jistjstagnation = FALSE; 

slave_request_stagnation = FALSE; 

masterjist_age++; 

slave_request_age = 0; 

slave_ list_age = 0; 

} 

} 

else 

{ 

if (acquire_from_masterO) 
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{ 

master_list_age = 0; 
if (oldest_master_serviced) 
master_request_age = 0; 

> 

> 

^* ********************************************* ************************ 
•••/ 

status acquire^ from_masterO 

^» ******************************* 

•**/ 

< 

resource_operation *list_end, 'operation, *first_operation; 

node *operation_node; 

int temp_ehannels_available; 

int first_op_channels_available, other_op_channe!s_available; 

oldest — masterjserviced = FALSE; 
if (q_head_is_not_empty(master__list)) 

{ 

list_end = (resource_operation *)master_list; 

first_operation = operation = (resource_opcration *)master_list->head; 
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first_op_channek_avaflable = channels_available; 
other_op_channels_available = channels_available; 
if (master_list_stagnation j| master_request_stagnation) 
{ 

other_op_channels_available = 

channels_available * (channels_available & operation->channe]_map); 

} 

if (slave_list_stagnation |,' slav e _request_stagnation) 
{ 

firstnp_channels_availabJe = 
otber_op_channels_available = 

cliannels.available * (channels.avaUable & operation->chaimel_map); 

} 

io 

{ 

operation_node = (node Operation; 
if (operation == first_operation) 

temp_channels_available = first_op_channek_available; 

else 

temp_channels_available = other_op_channeIs_available; 

if (operation->channel_map == (operation->channeLmap & 
temp_channels_available)) 

{ 

/* channels are available for this operation; grant it */ 
unlink_node(operation_node); 
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link_q_tai](master_granted_list, operation_node); 
channels_available *= operation->channel_map; 
if (operation == first_operation) 

oldest_master_serviced = TRUE; 
last_serviced = MASTER; 
age_request_age(masterjist); 
cbeck_cbaimel_use(); 



return(TRUE); 
} 

operation = (resource^ operation *)operation_node->next 

} 

while (operation != list_end); 

return(FALSE); 

} 

else 

{ 

retum(FALSE); 
} 

} 

***/ 

status acquire^ from__slaveO 
{ 
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resource_operation *Iist__end, 'operation, *first_operation; 

node *operation_node; 

int temp_channels_available; 

int first_op_channels_available, other_op_channels_available; 

oldest_slave_serviced = FALSE; 
if (qjiead Js_not_eropty(sIave_list)) 
{ 

list_end = (resource_operation *)slavejist; 

first_operation = operation = (resource_operation *)slavejist->head; 
f^t_op_channels_avaflable = channels_available; 
other_op_channels_avaiIable = channels_available; 
if (slave Jist_stagnation j| sIave_request_stagnation) 
{ 

other_op_channels_available - 

channels_available " (channels_available & operation->channel_map); 

} 

if (master_list_stagnation ,'! master_request_stagnation) 
{ 

&st_op_channels_available = 
other_op_channels_availabIe = 

channels.available * Cchannels_available & operation->channel_niap); 

} 



do 

{ 

operation_node = (node 'Operation; 
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if (operation == first_operation) 

temp_channels_available = first_op_channels_available; 

s else 

temp^channels^avaDable = other_op_channels_available; 

10 

if (operation->channel_map — (operation->channel_map & 
temp_channels_available)) 

15 { 

r channels are available for this operation; grant it */ 
un unk_n oue(opera tion_n od e); 

20 

link_q_tail(slave - granted_list 1 operation_node); 
channels_available operation->channel_map; 
25 if (operation — first_operation) 

oIdest_slave_serviced = TRUE; 
last__serviced = SLAVE; 
age_request_age(slave - list); 
check_channel_useQ; 
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return(TRUE); 
} 

operation = (resource_operation *)operation_node->next; 

} 

while (operation != list_end); 
retum(FALSE); 

} 



else 

{ 
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retura(FALSE); 
} 

} /* end resource allocation algorithm "/ 



Explanations and definitions for terms used in the above algorithm are provided below: 
servicejoops - the number of requests that can be outstanding at any one time. 
master_request_stagnation - the state entered when the master ICON chip has serviced the slave icon 
requests too many times without servicing a master ICON'S request (Inter-ICON fairness parameter) 

master_list_stagnation - the state entered when a request on the master ICON'S request list 
is aged' beyond a configurable threshold relative to other requests being serviced in the master ICON'S re- 
quest queue. (This is used to promote Intra-ICON list request fairness to ensure starvation within the master 
ICON s list is avoided because of a request requiring a large number of resources waiting behind many requests 
requiring only small numbers of resources.) 

slave_request_stagnation - the state entered when the master ICON chip has serviced the master 
ICON'S requests too many times without servicing a slave ICON'S request (Inter-ICON fairness parameter) 
s'qve_!.st_st?3n=»tion - the state entered when a request on the slave ICON'S request list is 'aged' be- 
yond a configurable threshold relative to other requests being serviced in the slave ICON'S request queue 
(This is used to promote Intra-ICON list request fairness to ensure starvation within the slave ICON'S request 
list is avoided because of a request requiring a large number of resources waiting behind lots of requests re- 
quiring only small numbers of resources.) 

Iast_serviced - a mechanism for providing fairness in servicing the least recently serviced controller, 
turn - indicates which list will be looked at first when servicing requests. 

master_list_age - the relative age of the request list for the master as compared to the number of re- 
quests serviced from the slave's list It is used to ensure that the master is serviced at worst case, after some 
number of requests have been serviced from the slave. When the master list age exceeds a threshold the 
30 master_request_stagnation state is entered into. 

master_request_age - the relative age of the oldest member of the master list when compared to the 
number of requests serviced from the master's list. It is used to ensure that the oldest request on the master's 
.st is serviced at worst case, after some number of other requests have been serviced within the master list 
When the master request age exceeds a threshold, the master_list_stagnation state is entered into. 

slave_list_age- the relative age of the request list for the slave as compared to the number of requests 
serviced from the master's list It is used to ensure that the slave is serviced at worst case, after some number 
of requests have been serviced from the master. When the slave list age exceeds a threshold, the 
slave_request_stagnation state is entered into. 

slave_request_age - the relative age of the oldest member of the slave list when compared to the num- 
ber of requests serviced from the slave's list. It is used to ensure that the oldest request on the slave's list is 
serviced at worst case, after some number of other requests have been serviced within the slave list When 
the slave request age exceeds a threshold, the slave_list_stagnation state is entered into. 

The algorithm presented above, together with the description of the invention provided earlier, should be 
readily understood by those skilled in the art as providing a method for managing the operations of multiple 
disk array controllers which share access to the disk drive units, busses, and other resources within the array. 

Although the presently preferred embodiment of the invention has been described, it will be understood 
that various changes may be made within the scope of the appended claims. 

so Claims 

1. A method of coordinating the execution of I/O requests received from requesting agents in a computer 
system in which said requesting agents share access to and control over a plurality of resources char- 
acterized by the steps of: 

«s (A) establishing a request queu which includes an entry corresponding to each I/O requ st received 

from said requesting agents, each entry including an identification of resources that are required by 
said entry's corresponding I/O request; 

(B) maintaining a resources available status array which includes an entry for each resource which is 
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not currently in use by any requesting agent and is not currently reserved for future use by any re- 
questing agent; 

(C) systematically comparing each entry in said request queue with the ntries in said resources avail- 
able status array to detect an entry in said request queue identifying resources all of which are con- 
tained in said resources available status array; 

(D) granting control of the resources associated with said entry detected in step C to the requesting 
agent providing the I/O request corresponding to the entry detected in step C; and 

(E) executing the I/O request corresponding to the entry identified in step C. 

A method as claimed in Claim 1 and further comprising the step of. 

removing from said resources available status array the entries for each resource which is asso- 
ciated with said entry detected in step C upon the completion of step C. 

A method as claimed in Claim 2 and further comprising the step of: 

returning to said resources available status array the entries for each resource which is associated 
with said entry detected in step C upon the completion of step E. 

Amethod as claimed in Claim 1, 2 or 3, wherein each entry in sakj request queue includes a request age 
indicating the relative age of each entry in the request queue with respect to other entries in tne request 
queue, said method further including the step of: 

granting priority to an entry in the request queue based on the relative ages. 

Amethod as claimed in any one of the preceding claims wherein: 

said resources include disk drives (31-35, 41-45) within a disk array; and 

said requesting agents comprise disk array controllers (11,13) which share access to and control 
over said disk drives (31-35, 41-45). 

A method as claimed in any one of Claims 1 to 4 wherein: 

said requesting agents comprise disk array controller (11, 13) within a disk array subsystem within 
said computer system; and 

said resources comprise disk drives (31-35, 41-45) and busses (51-55) within said disk array sub- 
system. 

A method as claimed in any one of the preceding claims wherein: 

said resources include busses (51-55) within said computer system. 

A method as claimed in any one of Claims 1 , 2 or 3 wherein: 

each entry within said request queue further includes a request age indicating the relative age of 
each entry in said request queue with respect to other entries in the request queue; and 

said method further includes the steps of: 

examining said request ages to identify any entry having a request age which exceeds a prede- 
termined request age value; and 

removing from said resources available status array the entries for each resource which is asso- 
ciated with said entry having a request age which exceeds said predetermined request age value, reserv- 
ing the resources for use with the requesting agent and request associated with the entry having a request 
age which exceeds said predetermined request age value. 

A method as claimed in any one of the preceding claims wherein: 

a request queue is maintained for each requesting agent in said computer system; and 
said step of systematically comparing each entry in said request queue with the entries in said re- 
sources available status array includes the step of alternately examining the entries in each request queue 
to detect an entry in said request queues identifying resources all of which are contained in said resources 
availabl status array. 

A method of coordinating the operation of processors, in a disk array system including first and second 
disk array controllers and a plurality of disk drives and busses under the control of each of said processors, 
characterized by the steps of: 

(A) stablishing a request queue for each disk array controller which includes an entry corresponding 
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to an I/O requ st received by said disk array system, each entry including an identification of disk drives 
and busses that are required by said entry's corresponding I/O request; 

(B) maintaining a resources available status array which includes an entry for each disk drive and bus 
which is not currently in use by any disk array controller and is not currently reserved for future use 
by any disk array controller; 

(C) systematically comparing each entry in said request queues with the entries in said resources avail- 
able status array to detect an entry in said request queues identifying resources all of which are con- 
tained in said resources available status array; 

(D) granting control of the disk drives and busses associated with said entry detected in step C to the 
disk array controller associated with the request queue corresponding to the entry detected in step C; 
and 

(E) executing the I/O request corresponding to the entry identified in step C. 

A method as claimed in Claim 10 wherein: 

each entry within said request queue further includes a request age indicating the relative age of 
each entry in said request queue with respect to other entries in the request queue; and 

said method further includes the steps of: 

examining said request ages to identify any entry having a request age which exceeds a prede- 
termined request age value; and 

removing from said resources available status array the entries for each resource v/hich «s asso- 
ciated with said entry having a request age which exceeds said predetermined request age value, reserv- 
ing the disk drives for use with the disk array controller and I/O request associated with the entry having 
a request age which exceeds said predetermined request age value, 

A method as claimed in Claim 10 or 11, wherein: 

said step of systematically comparing each entry in said request queue with the entries in said re- 
sources available status array includes the step of alternately examining the entries in each request queue 
to detect an entry in said request queues identifying resources all of which are contained in said resources 
available status array. 

A method as claimed in Claim 10, wherein: 

each request queue further includes a list age indicating the age of the oldest entry in the request 

queue; 

said step of systematically comparing each entry in said request queue with the entries in said re- 
sources available status array includes the steps of: 

examining said list ages to identify any request queue having a list age which exceeds a predeter- 
mined list age value; and 

if a request queue is identified as having a list age which exceeds said predetermined list age, sys- 
tematically comparing the entries in the request queue identified as having a list age which exceeds said 
predetermined list age only until the list age for the request queue is below said predetermined list age 
value. 
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@ Method of managing resources shared by multiple processing units. 

(57) The invention provides for resource allo- 
cation logic for a computer system including a 
plurality of processors (17, 21) which share _ 
access to, and control of, a plurality of resour- *?_ 
ces, such as disk drive units (31-35, 41-45) or 
busses (51-55). Resource allocation logic (300) 
coordinates the execution of requests received 
from the processors to avoid resource sharing 
inefficiencies and deadlock situations. The allo- 
cation logic (300) maintains a "request" queue 
for each processor (17. 21), seeking to satisfy all 
requests quickly and fairly. The queues contain 
an entry corresponding to each request re- co 
ceived from its corresponding processor and an • 
identification of resources that are required by £3 
the entry's corresponding request The alio- fj^ 
cation logic (300) also maintains a "resources 
available" status array of resources which are 
not currently in use by any processors, or are 
not reserved for future use by any processors. 
The logic repeatedly compares each entry in the 
request queues with the entries in the resources 
available status array to detect an entry in the 
request queue identifying resources all of which 
are contained in the resources available status 
array. Once the allocation logic (300) can satisfy 
a particular request, it signals a grant to the 
requesting processor for the resources reques- 
ted and the requested resources are removed 
from the resources available status array. Upon 
conclusion of x cution of the granted request, r- 
the resources are again released to th resour- ^ 
ce allocation logic (300) for utilization by other 
resource requests. 
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